3 ms·
variable execution time --> a bane of security. Why aren't cryptographic security algorithms that defend against sidechannel timing attacks by guaranteeing fix
by rkagerer 3y ago
variable execution time --> a bane of security.
Why aren't cryptographic security algorithms that defend against sidechannel timing attacks by guaranteeing fixed execution time more common?
- NavinF 3y agoDJB cipher suites do that, but a lotta people have no idea how to select cryptographic primitives so they go for something that was popular 30 years ago. Some fun slides with examples of timing attacks: https://cr.yp.to/talks/2014.10.18/slides-djb-20141018-a4.pdf https://cr.yp.to/talks/2014.10.18/slides-djb-20141018-a4.pdf. Old standards like RFC 5246 often say shit like "it is not believed to be large enough to be exploitable, due to the large block size of existing MACs and the small size of the timing signal" and then get exploited 5 years later.